Debian Bug report logs - #1082011
python3-passlib: bcrypt warning

Display info messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Slavko <linux@slavino.sk>

To: submit@bugs.debian.org

Subject: python3-passlib: bcrypt warning

Date: Tue, 17 Sep 2024 14:49:22 +0200

[Message part 1 (text/plain, inline)]

Package: python3-passlib
Severity: normal
Version: 1.7.4-4

The passlib library doesn't play nicely with latest brypt:

    >>> from passlib.hash import bcrypt
    >>> bcrypt.hash("123456")  
    (trapped) error reading bcrypt version
    Traceback (most recent call last):
      File "/usr/lib/python3/dist-packages/passlib/handlers/bcrypt.py", line 619, in _load_backend_mixin
          version = _bcrypt.__about__.__version__
                     ^^^^^^^^^^^^^^^^^
    AttributeError: module 'bcrypt' has no attribute '__about__'
    '$2b$06$KmisvbnzRr9WEKaGrf0r3OyyjNBh8FaCBaGHLgnvxPZOX129r18Gq'

AFAIK that _bcrypt.__about__.__version__ was removed from bcrypt 4.1
(or so).

The current passlib development on heptapod is stalled, see
https://foss.heptapod.net/python-libs/passlib/-/issues/187
where the fork was announced at https://github.com/ThirVondukr/passlib

I cannot state how this fork will behave, but it has fixed some
problems and released 1.7.5 version recently.

regards

-- 
Slavko
https://www.slavino.sk

[Message part 2 (application/pgp-signature, inline)]

Message #8 received at 1082011-submitter@bugs.debian.org (full text, mbox, reply):

From: Colin Watson <cjwatson@debian.org>

To: 1082011-submitter@bugs.debian.org

Subject: Bug#1082011 marked as pending in python-passlib

Date: Sun, 02 Mar 2025 17:05:28 +0000

Control: tag -1 pending

Hello,

Bug #1082011 in python-passlib reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/python-team/packages/python-passlib/-/commit/21989badc51de7b579f7ea212e08926cccda62a7

------------------------------------------------------------------------
Use importlib.metadata to get bcrypt version

Closes: #1082011
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1082011

Message #15 received at 1082011-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 1082011-close@bugs.debian.org

Subject: Bug#1082011: fixed in python-passlib 1.7.4-5

Date: Sun, 02 Mar 2025 18:48:43 +0000

[Message part 1 (text/plain, inline)]

Source: python-passlib
Source-Version: 1.7.4-5
Done: Colin Watson <cjwatson@debian.org>

We believe that the bug you reported is fixed in the latest version of
python-passlib, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1082011@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Colin Watson <cjwatson@debian.org> (supplier of updated python-passlib package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 02 Mar 2025 17:03:02 +0000
Source: python-passlib
Architecture: source
Version: 1.7.4-5
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Colin Watson <cjwatson@debian.org>
Closes: 1082011 1090282
Changes:
 python-passlib (1.7.4-5) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Alexandre Detiste ]
   * Remove useless patch (it's "future" that was removed, not "__future__").
 .
   [ Colin Watson ]
   * Use importlib.metadata to get bcrypt version (closes: #1082011).
   * Use importlib.metadata to get argon2 version.
   * Build-depend on python3-bcrypt.
   * Accept legacycrypt as an alternative to crypt (closes: #1090282).
Checksums-Sha1:
 42e4b964eedfb81dee8991a20130ba007f7d285a 2214 python-passlib_1.7.4-5.dsc
 2e40e4bd7534a51316cc3489654ab2dd28b066b2 10916 python-passlib_1.7.4-5.debian.tar.xz
Checksums-Sha256:
 5d1ed80c7ec2b6010db7d560f66162da95d76726b98d034a274579e0ab93c251 2214 python-passlib_1.7.4-5.dsc
 c0227d962c98819830bed5cb25da81f88bbf60808fe4f5b5a179a7b28c72ce27 10916 python-passlib_1.7.4-5.debian.tar.xz
Files:
 21f76557f010ed059c0ded08cbb02adb 2214 python optional python-passlib_1.7.4-5.dsc
 8cefbd1e3308447ae747478ccb6fa6fb 10916 python optional python-passlib_1.7.4-5.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=PscA
-----END PGP SIGNATURE-----

[Message part 2 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.